4551 matches found
CVE-2026-70455
A denial-of-service flaw in rsync allows remote attackers to exhaust system memory and CPU. By sending requests using the --zt Zstandard compression alias, an attacker can bypass security directives and spawn an excessive number of worker threads. Mitigation If the rsync daemon is unused,...
PT-2026-79149
Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to avoid the compression bomb check entirely. This is TROVE-2026-022...
cve-2026-47860 - MEDIUM - Unbounded decompression of attacker-supplied compressed message bodies
cve-2026-47860 - MEDIUM - Unbounded decompression of attacker-supplied compressed message bodies...
CVE-2026-77639: Unprotected Alternate Channel
Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to avoid the compression bomb check entirely. This is TROVE-2026-022...
CVE-2026-75476
Tanium addressed a compression bomb vulnerability in Threat Response...
CVE-2026-11617
Tanium addressed a compression bomb vulnerability in Findings...
CVE-2026-11617 Tanium addressed a compression bomb vulnerability in Findings.
Tanium addressed a compression bomb vulnerability in Findings...
EUVD-2026-63098
Tanium addressed a compression bomb vulnerability in Findings...
CVE-2026-11617
Tanium addressed a compression bomb vulnerability in its Findings component. The CVSS 3.1 score is 3.1 (LOW) , with a network attack vector, high complexity, low privileges required, and limited impact on availability only. No exploitation details or specific affected versions are provided in the...
CVE-2026-75476
Tanium Threat Response is affected by a compression bomb vulnerability. A compression bomb (or zip bomb) allows an attacker to craft a small compressed file that expands to an extremely large size when decompressed, potentially exhausting system resources. The CVSS 3.1 score is 3.1 (LOW) , with a...
EUVD-2026-63097
Tanium addressed a compression bomb vulnerability in Threat Response...
CVE-2026-75476 Tanium addressed a compression bomb vulnerability in Threat Response.
Tanium addressed a compression bomb vulnerability in Threat Response...
CVE-2026-75476: Improper Handling of Highly Compressed Data (Data Amplification)
Tanium addressed a compression bomb vulnerability in Threat Response...
CVE-2026-11617: Improper Handling of Highly Compressed Data (Data Amplification)
Tanium addressed a compression bomb vulnerability in Findings...
PT-2026-78709
Tanium addressed a compression bomb vulnerability in Findings...
PT-2026-78716
Tanium addressed a compression bomb vulnerability in Threat Response...
CVE-2026-19671
Malcolm's upload-processing pipeline scripts/safe-extract.py enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives zip/tar/rar/7z via libarchive, but those limits are not applied when the uploaded file is a single-stream compressed format .gz,...
UBUNTU-CVE-2026-59949
yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len arguments in XXHashFactory.nativeInstance.hash32.hash, XXHashFactory.nativeInstance.hash64.hash,...
httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack
A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...
